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[edit class-of-service] Hierarchy Level 



class-of-service {. 
input { 
fpc fpc-number{ 

precedence-map map-name; 

) 

interfaces { 

interface-name { 

inet-precedence-map; 
mpls-cos-map; 
unit unit-number { 

output-queue queue-number; 

) 

> 

) 

precedence-map map-name { 

bits precedence-bit output-queue queue-number; 

) 

) 

output { 

drop-profile profile-name { 
stream-profile { 

~~ fill-level fill-percentage drop-probability probability-percentage; 

^ ) 

fe« plp-set-queue-profile { 

SJ fill-level fill-percentage drop-probability probability-percentage; 

UJ } 

^2 , ' . plp-clear-queue-profile { 

fill-level fill-percentage drop-probability probability-percentage; 

) 



j~ fpc fpc-n umber { 

^" drop-profile profile-name; 

L } 

Q interfaces { 

t-l \ interface-name { 

Ljl 



transmit-queues { 

output-queue queue-number bandwidth percentage ; 
} 

weighted-round-robin { 

output-queue queue-number weight percentage; 

Y 

unit unit-number [ 
precedence-rewrite { 

output-queue queue-number { 

pip-clear rewrite-bits precedence-bit, 
pip-set rewrite-bits precedence-bit, 

) 

} 

) 

) 

) 

) 

policy { 

class class-name [ 
classification-override { 

output-queue queue-number; 

} 

} 

) 

} # End of (edit class-of-service] hierarchy level 
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sonet-options { 
aps{ 

advertise-interval milliseconds; 
authentication-key key; . 
force; 

hold-time milliseconds; 
lockout; 

neighbor address; 
paired-group group-name; 
protect-ctrcuit group-name; 
request; 

revert-time seconds; 
working-circuit group-name; 

> 

bytes { 
el-quiet value; 
fl value; 
12 value; 
si value; 
23 value; 
z4 value; 

} 

fcs (32 | 16); 

loopback (local | remote); 

path-trace trace-string; 

(payload-scrambler | no-payload-scrambler); 

rfc-2615; 

(zO-increment | no-zO-increment); 



speed (10m 1 100m); 
tl-options { 

buildout (0-133 | 133-266 | 266-399 | 399-532 | 532-655); 

byte-encoding (nx64 | nx56); 

fcs (32 1 16); 

framing (sf | est); 

idle-cycle-flags (flags | ones); 

invert^data; 

line-encoding (ami | bSzs); 
loopback (local | remote); 
start-end-flag (shared \ filler); 
timeslots slot-number; 

} 

t3-options { 

bert-algorithm algorithm; 
bert-error-rate rate; 
bert-period seconds; 
(c bit-parity | no-cbit-parity); 

compatibility-mode (digital-link. | kentrox | larscom) <subrate value 
fcs (32 | 16); 

(feac-loop-respond | no-feac-loop-respond); 
idle-cycle-flag value; 
(long-buildout | no-long-buildout); 
loopback (local | remote); 
(payload-scrambler | no-payload-scrambler); 
start-end-flag value;' 

} 

traceoptions { 

flag flag <flag-modifier> <disable>; 

} 

transm it-bucket { 

overflow (tag | discard); 
rate speed; 



} 




tsp-lifetime seconds; 
no-authentication-check; 
overload <timeout $econds>; 
reference-bandwidth reference-bandwidth ; 
traffic-engineering { 

disable; 

shortcuts; 

} 

traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 

} 

interface interface-name { 
disable; 

csnp-interva( seconds; 
hello-authentication-key key; 
hello-authentication-type authentication; 
Isp-interval milliseconds; 
mesh-group (value | blocked); 
passive; 

level ievel-number { 
disable; 

Q hello-authentication-key key, 

k f\ hello-authentlcatton-type authentication; 

hello-interval seconds; 
hold-time seconds; 
metric metric; 



passive ; 

yJ priority priority; 

I1J te-metric metric; 

i ) 



} 

} # End of [edit protocols isis] hierarchy level 



LDP Idp { 

~f interface interface-name { 

disable; 

Q1 hello-interval seconds 

Li. 



hold-time seconds; 

} 

keepa live-interval seconds; 
keepalive-timeout seconds; 
preference preference; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 

} 

} # End of [edit protocols Idp] hierarchy level 



MPLS mpls { 

disable; 



no-propagate-ttl; 
admin-groups { 

group-name group-value; 

} 

log-updown { 

(syslog | no-syslog); 
(trap | no-trap); 

} 
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flag flag <flag-modifier> <disabie>; 

} 

} 

group group-name { 
disable; 

export [ policy-names ]; 
import [ policy-names ]; 
local-address address; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(wor1d-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 

} 

peer address; { 
disable; 

export [ policy-names ]; 
import [ policy-names ]; 
local-address address ; 
mode <(mesh-group | standard)>; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readab!e)>; 
flag flag <flag-modifier> <disable>; 

} 

) 

} 

} #End of [edit protocols msdp] hierarchy level 



^ OSPF ospf { 

disable; 

Ly export I policy-names ]; 

fjj external-preference preference; 

preference preference; 

4 s reference-bandwidth reference-bandwidth; 

s traffic-engineering { 

Q np-topology; 

shortcuts; 

} 

traceoptions { 

file name <replace> <size s/ze> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disabte>; 

* ) 

area area-id { 

area-range network/ masklen <restrict>; 
authentication-type authentication; 
interface interface-name { 
disable; 

authentication-key key <key-id identifier*; 
dead-interval seconds; 
hello-interval seconds; 
interface-type type; 
metric metric; 

neighbor address <eligible>; 
passive; 

poll-interval seconds; 
priority priority; 
retransmit-interval seconds; 
transit-delay seconds; 
transm it-interval seconds; 

) 
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} 



flag flag <ffag-modifier> <disable>; 



w 

ru 



o 
si 

o 



authentication-key password; 
authentication-type type; 
(check-zero | no-check-zero); 
import [policy]; 
message-size number; 
metric-in metric; 
rece ive receive-options ; 
send send-options; 
group group-name { 
export [po/ycy]; 
metric-out metric; 
preference preference ; 
neighbor neighbor-name { 
authentication-key password; 
authentication-type type; 
(check-zero | no-check-zero); 
import [policy]; 
message-size number; 
metric-in metric; 
receive receive-options; 
send send-options; 

} 

) 

} # End of [edit protocols ripj hierarchy level 



Router Discovery router-discovery { 
disable; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 

} 

interface interface-name { 
min-advertisement-interval seconds; 
max-advertisement-interval seconds; 
lifetime seconds; 

} 

address address { 
(advertise | ignore); 
(broadcast | multicast); 
(priority priority | ineligible); 

} 

} # End of [edit protocols router-discovery] hierarchy level 

RSVP rsvp { 

disable; 

keep-multiplier number; 
refresh-time seconds; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>- 

) 

interface interface-name { 
disable; 

(aggregate | no-aggregate); 
authentication-key key; 
bandwidth bps; 
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[edit routing-options] Hierarchy Level 



routing-options { 
aggregate { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ) | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

} 

route destination-prefix { 
policy policy-name; 
(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

> 

) 

autonomous-system autonomous-system < loops number>; 
confederation confederation-autonomous-system members autonomous-system; 
forward ing-tab(e { 

export [ policy-names ]; 

) 

generate { 
defaults { 

(active | passive); 

as-path <as-path> origin (egp | igp | incomplete | none)> otomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids } | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

_ (metric | metric2 | metric3 | metric4) value; 

iQ ! (preference | preference2 | color | color2) preference; 

k& (tag | tag2) string; 

} 

route destination-prefix { 
policy poiicy-name; 
(active | passive); 

as-path <as-path> origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

} 

} 

interface-routes ( 

rib-group routing-tabie-name; 

} 

martians { 

destination-prefix match-type <allow>; 

} 



Li: 
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multicast { 

scope scope-name { 

interface interface-name; 
prefix destination-prefix; 

) 

) 

options { 

syslog (level level | upto level); 

) 

rib routing-table { 
static { 
defaults { 

(active | passive) ; 

as-path <as-path> <origin (egp | igp | incomplete |.none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(readvertise | no-readvertise); 
(no-retain | retain); 
(tag | tag2) string; 

) 

route destination-prefix { 



(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] \ no-advertise | no-export | nonexport-subconfed | none); 
(install | no-install); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(readvertise | no-readvertise); . 
(no-retain | retain); 
(tag | tag2) string; 



(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] J no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preferences | color | color2) preference; 
(tag | tag2) string; 



route destination-prefix { 
policy policy-name; 
(active | passive); . 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric 2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 



next-hop; 



aggregate { 
defaults { 
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fit 



generate { 

defaults { . * ; 

(active | passive); t '] 

as-path <as-path> origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; •'//-, 
community ([ community-ids J | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

) 

route destination-prefix { 
policy policy-name; 
(active j passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in~address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | coior2) preference; 
(tag | tag2) string; 

} 

) 

martians { 

destination-prefix match-type <a llo w> ; 

) 

} 

rib-groups { 
group-name { 

import-rib [ group-name ); 
export-rib group-name ; 

} 

~ rr router-id address ; 

* static { 

sui defaults { 

\| (active | passive); 

jy. as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids J | no-advertise | no-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metric2 | metric3 | metric4) value; 
(preference ] preference2 | color | color2) preference; 
(readvertise | no-readvertise); 
(no-retain | retain); 
(tag | tag2) string; 

} 

route destination-prefix [ 
next-hop; 
(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> otomic-aggregate> 

oggregator as-number in-address>; 
community {[ community-ids ] | no-advertise | no-export | no-export-subconfed (none); 
(install | no-install); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(readvertise | no-readvertise); 

(nc-retain | retain); FIGURE 1 7C 

(tag | tag2) string; 

) 

} 

traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <fiag-modifier> <disable>; 

} 

} # End of [edit routing-options] hierarchy level 



[edit system] Hierarchy Level 



system { 

authentication-order [ authentication-methods ); 
backup-router address destination destination-address>; 
compress-configuration-files; 
default-address-selection; 
dhcp-relay (server address | disable); 

diag-port-authentication (encrypted-pas sword "password" | plaintext-password); 
domain-name domain-name; 
domain-search [domain-list]; 
host-name host-name; 
location { 

altitude feet; 

country-code code; 

h coord horizontal-coordinate; 

lata service-area; 

latitude degrees; 

longitude degrees; 

npa-nxx number; 

postal-code postal-code; 

vcoord vertical-coordinate; 

} 

login { 

message text; 
class class-name { 

allow-commands "regular-expression" ; 

deny-commands "regular-expression "; 

Idle-timeout minutes; 

permissions [ permissions ]; 



user user-name { 
full-name complete-name; 
uid u Id-value; 
class class-name; 
authentication ( 

(encrypted-password "password" | plain-text-password); 

ssh-rsa "public-key* ; 

) 

} 

) 

name-server.{ 



ntp{ 

authentication-key key-number type type value password; 
boot-server address; 

broadcast <address> <key key-number> <version value> <ttl value>; 

broadcast-client; 

multicast-client <address>; 

peer address <key key-number> <version value> <prefer>; 
server address <key key-number> <version value> <prefer>; 
trusted-key [ key-numbers ]; 

) 

ports ( 
auxiliary { 
insecure; 
speed baud-rate; 
type terminal-type; 



) 
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address; 

} 

no-redirects; 



console { 
insecure; 
speed baud-rate; 
type terminal-type; 



} 

} 

processes { 

inet-process (enable | disable); 
interface-control (enable | disable);, 
mib-process (enable | disable); 
ntp (enable | disable); 

routing (enable | disable); 
snmp (enable | disable); 

watchdog (enable | disable) <timeout seconds>; 

) 

radius-server server-address { 
port number: 
retry number, 
secret password; 
timeout seconds; 

) 

root-authentication { 

(encrypted-password "password" | plain-text-password); 
ssh-rsa "public-key"; 

> 

services { 

finger <connection-limit limit> <rate-limit limit>; 
ssh <connectiorvlimit limit> <rate-limit limi>; 
telnet <connection-limit limit> <rate-limit limit>; 

} 

static-host-mapping { 
host-name { 
inet [ address ]; 
sysid system-Identifier; 
alias t alias ]; 

} 

} 

syslog { 

file filename { 
facility level; 
archive { 
files number; 
size size; 

(world-readable | nc-world-readable); 

) 

) 

host hostname { 
facility level; 
facility-override facility, 
log-prefix string; 

) 

user {username \ *) { 
facility level; 

} 

console { 
facility level; 

) 

archive { 

files number; 
size size; 

(world-readable | no-world-readable); 

} 

} 

tacplus-server server-address { 
secret password; 
single-connection; 
timeout seconds; 

} 

time-zone time-zone; 
)} # End of [edit system] hierarchy level 
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